Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/JWUSsX7lBpjUmjdYgBUYbndp_dw.roa
File: JWUSsX7lBpjUmjdYgBUYbndp_dw.roa (raw, json)
Hash identifier: GOBot/6re3dKi9XfLhUr0WuKsis3uwbPKCvNiLjmka8=
Subject key identifier: 25:65:12:B1:7E:E5:06:98:D4:9A:37:58:80:15:18:6E:77:69:FD:DC
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B5327B9368B14BEA3D1101E989E970C
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/JWUSsX7lBpjUmjdYgBUYbndp_dw.roa
Signing time: Sun 01 Jan 2023 03:14:49 +0000
ROA not before: Sun 01 Jan 2023 03:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211871
IP address blocks: 213.238.179.0/24 maxlen: 24
213.238.181.0/24 maxlen: 24
213.238.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:27:b9:36:8b:14:be:a3:d1:10:1e:98:9e:97:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=256512b17ee50698d49a37588015186e7769fddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e4:d6:d4:e3:ce:81:6e:bb:9e:a2:b4:72:bf:
fa:d0:fd:52:be:0d:3c:4d:9b:f8:e8:bf:f1:48:63:
fe:4e:3b:50:6a:e1:70:45:61:86:cb:ab:be:63:54:
73:18:a5:25:5b:78:02:09:52:0d:88:09:8b:1b:8c:
b5:aa:f6:d5:e2:3b:05:a3:74:4a:e4:64:20:9a:1a:
1f:6d:bb:67:92:6a:c7:42:4b:28:de:46:ce:19:3b:
54:27:6e:b9:ff:ea:6c:5f:50:b6:3d:e0:ca:a9:4b:
8d:d6:0f:c3:03:ce:81:26:4b:9a:31:cb:e6:f1:03:
4b:00:cf:71:59:5c:02:d3:18:47:19:f0:44:ba:c1:
36:4e:d4:09:23:00:4e:b3:35:50:1c:48:d8:3a:e8:
fb:6c:50:ea:df:62:fc:89:0a:33:8e:9d:c4:71:7b:
26:55:eb:b5:35:34:e5:8b:9f:17:00:f0:49:44:e1:
7e:78:ee:ac:7a:41:85:6d:90:97:51:ce:5e:a3:d8:
69:ca:16:6c:29:74:58:b2:a1:18:c5:e1:68:a1:6e:
2f:ba:d2:44:a4:9b:74:d2:a1:49:f2:7a:8b:67:e2:
81:65:8d:4c:f0:ce:28:d0:2d:e8:c6:8f:32:04:c3:
e7:12:c9:af:3d:cf:1e:de:2a:8b:f7:9b:05:8b:50:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:65:12:B1:7E:E5:06:98:D4:9A:37:58:80:15:18:6E:77:69:FD:DC
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/JWUSsX7lBpjUmjdYgBUYbndp_dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.179.0/24
213.238.181.0/24
213.238.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8b:87:b8:e4:ef:17:c3:07:68:e2:bd:ba:e0:ea:ec:a1:13:
fe:fb:6e:19:79:23:94:09:07:64:a4:de:7b:15:7e:99:5d:68:
9b:d0:31:0d:0b:1e:88:bd:26:db:93:fe:de:65:69:78:25:6c:
24:54:f5:0a:b1:46:e2:3d:34:cc:2f:bc:fa:ee:12:a3:d3:14:
17:2c:89:40:8e:6b:d1:ca:5f:6d:1e:ee:6e:91:3f:c1:58:87:
fc:58:47:23:b5:17:b6:3d:8f:66:90:d7:c5:10:3f:89:d7:9f:
ad:06:08:2a:71:00:fb:23:dd:95:f9:54:49:44:e0:4b:2f:61:
4b:65:61:66:0c:35:3d:bf:e7:b6:0c:85:aa:51:fe:3b:b2:19:
07:20:d4:b3:33:71:de:d1:5b:35:c3:5f:a7:28:90:b5:f9:2f:
57:8c:49:59:3f:d8:d4:7d:39:68:00:f5:59:fd:c5:c2:8f:bc:
06:9c:e7:95:00:76:82:e6:ee:f3:e0:d1:e0:48:05:12:e2:cd:
6d:f3:5d:48:5c:ab:96:87:43:d9:5a:df:34:99:ab:6c:73:fa:
0a:04:d9:93:2f:a8:93:b1:80:46:bf:d8:77:db:98:f5:19:12:
6b:fc:50:52:f8:46:03:a1:ec:e6:9e:ce:7d:66:b1:71:2b:3f:
69:6c:c7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:28 2024 by rpki-client on console-ams.rpki-client.org